Leaderboard

If you notice that the connection speed drops down again increase the Jc parameter (I recommend values 10-80) and rearrange the H1, H2, H3, H4 values (they should be the numbers from 1 to 4 but their order can be any). ТСПУ is able to detect and throttle AmneziaWG and I personally had this situation twice, and twice I had to pump up the Jc parameter. Don't set it too high though: too much junk is also abnormal and potentially can become a fingerprint. According to the recent news Roskomnadzor has set a budget of 60 billion rubles (655 000 000 USD) to significantly upgrade their wonderboxes in the next 5 years. So I guess even more fun is coming. I've already bought a cheap VPS and installed Xray (VLESS-TCP-XTLS-Vision-REALITY), sing-box (Shadowsocks with 2022-blake3-aes-128-gcm) and Cloak but don't use it much to keep the IP from prematurely getting into the black lists (if they even currently exist in Russia, but in Iran they already do). May be it's all over the top but who knows the future? For now my main method of accessing the larger data world is still the good old AirVPN.

Hi AirVPN, Would just like to advocate for more servers/bandwidth to be made available for the Oceania region. The two servers in the region are often running at high capacity, resulting in degraded performance for users using the Oceania region. Thanks for your consideration.

Yes, I can confirm that AmneziaWG currently works amazingly well with AirVPN. I get speeds up to 150+ Mbps to the German servers even without the kernel module (sorry but I don't want to install anything from GitHub into the kernel). Unfortunately it's still a "DPI spoofing" solution in the vein of GoodbyeDPI, byedpi, SpoofDPI, etc., hence sooner or later they manage to detect those fake packet tricks and block it. My opinion is that only real obfuscation (methods used by Cloak, VRay, etc.) can be considered a long-term solution. For those who, like me, uses a Linux home server which acts like a VPN gateway, and start WireGuard/OpenVPN in a custom way, a couple of advices: download, compile and install both amneziavpn-go and amneziawg-tools. The first is the userspace daemon which creates the network interface, it will be run automatically once you run either: awg-quick <wg_interface_name> awg-quick <full_path_to_wg_config_file> That is the only command you should run.

Currently in Russia, I can confirm that OpenVPN UDP without any extra config (on any port) works on some US, NL and LV servers on mobile networks (MegaFon, MTS). On household connections, regular OpenVPN does not seem to work at all, but regular WireGuard sometimes does. When it doesn't work, the connection handshake usually succeeds, but no traffic passes. But what I wanted to share is that I've had near 100% success (on both household and mobile connections) using the AmneziaWG client with many (most?) AirVPN servers. This is a client that introduces modified handshake parameters intended to fool DPI, while remaining compatible with the vanilla WireGuard server implementation, and it's available for all platforms (you can always compile from source, but at the time of writing there are binaries available at least for Windows, iOS and Mac OS and Android. Linux kernel modules and binaries are also available on Github). Note: there is also an "AmneziaVPN" GUI client but I prefer to use the bare protocol implementation instead. These additional parameters are needed in the WireGuard config file generated by the Config Generator (check the Amnezia documentation for a detailed explanation), and have been verified to work: [Interface] Jc = 3 Jmin = 40 Jmax = 70 S1 = 0 S2 = 0 H1 = 1 H2 = 2 H3 = 3 H4 = 4

I've done a bit of research and it seems possible to do both, at least technically. Now we just need to talk about the merits of offering it. What I can definitely say is that it's not going to be a high priority thing right now.

I don't know if it's only for me but both SSL and SSH tunneling have got incredibly slow in the last several days, approximately since the beginning of the infamous throttling of YouTube (1st of August) or may be a couple of days later. I tried adding additional options for stunnel (socket = r:SO_OOBINLINE=yes; sni =; failover = rr; delay = yes), tried passing it through a DPI spoofer (byedpi, SpoofDPI) using proxychains: nothing helps at all, the speed still varies enormously, one moment it can be over 10 mbps, and 10 seconds later it almost stalls completely, or it may work fine for several minutes and then begin to degrade, or otherwise recover up to 10 mbps. It's completely unpredictable, and there are no errors in the log. Where is the problem? Is there a way to circumvent it?